Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
File:                     UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json)
Hash identifier:          kov3qsnTa/KvGBi37wdc5S7hgNB8CHvaKi9c0w29Gkc=
Subject key identifier:   1E:A0:BD:7F:81:34:74:60:4B:D9:91:A0:27:82:4F:AA:12:19:CA:50
Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Certificate issuer:       /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
Manifest number:          01BC
Signing time:             Mon 27 Jul 2026 05:37:52 +0000
Manifest this update:     Mon 27 Jul 2026 05:37:52 +0000
Manifest next update:     Mon 03 Aug 2026 05:37:52 +0000
Files and hashes:         1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: EgKdXg1wCpw40SUDhaIT+zKL/33IY3koQ/OY42ZLx9o=)
                          2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: 3kP9Z+OOoAND6PAOU9ue/UcJJCzKrLb+i6LxI6B2qrY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
                          rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
        Validity
            Not Before: Jul 27 05:37:52 2026 GMT
            Not After : Aug  3 05:37:52 2026 GMT
        Subject: CN=6a66eeb0-0e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:38:72:11:52:c1:f3:bf:f7:48:b2:eb:29:
                    5d:81:30:d9:02:d9:72:51:d0:c3:2f:00:a8:8d:11:
                    a9:2a:89:87:67:7d:57:9d:57:51:69:59:86:ab:36:
                    82:19:05:0a:43:23:38:9c:d0:03:ae:e9:cd:f8:f3:
                    b3:07:eb:91:54:c8:0b:f1:eb:7d:0d:8f:82:5f:b6:
                    06:32:78:3b:57:0e:7f:38:67:7d:0b:88:55:5a:7c:
                    ce:b9:da:56:b3:e3:8b:49:32:f9:50:1d:12:b9:af:
                    e4:ed:1b:f1:f3:85:20:17:ee:03:8b:a7:e9:d4:b6:
                    36:28:9c:8c:b8:ca:e2:8f:f9:fe:4c:d7:1d:ae:5a:
                    27:1f:c3:58:78:58:89:7e:17:63:b5:e3:f4:23:9f:
                    93:3f:b3:d5:54:b6:d8:4b:a9:19:52:19:1c:60:c4:
                    4a:1d:cd:18:6d:47:d4:59:8a:bf:ef:38:78:a0:5e:
                    fa:a0:da:bb:a3:34:ee:a2:f6:df:58:8a:d1:c0:18:
                    69:7b:0b:15:32:1e:70:8f:8c:a8:22:4f:0f:2b:6e:
                    9a:cf:7f:e9:2d:24:1a:da:62:f9:2a:df:93:74:1e:
                    96:9f:d7:c9:e1:ab:76:df:27:b1:77:0a:66:0b:35:
                    8c:aa:b4:96:fa:21:ce:27:50:1c:0d:66:ed:42:5f:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A0:BD:7F:81:34:74:60:4B:D9:91:A0:27:82:4F:AA:12:19:CA:50
            X509v3 Authority Key Identifier:
                keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:02:7b:2c:f1:2d:26:57:fe:45:64:98:90:cc:3e:40:57:02:
         4c:1b:74:cc:ad:dc:49:87:f7:d9:5b:0c:32:3b:00:f5:1f:89:
         c8:f3:b9:a8:24:24:fd:5e:5a:e4:a6:17:7b:6e:58:23:82:6f:
         0b:e2:9b:29:f7:b9:67:41:cd:ec:ca:24:2e:66:ae:5d:fb:5e:
         e2:62:5f:c9:9e:03:a9:35:47:fd:da:a6:d8:a0:98:54:22:90:
         e0:20:a4:22:ac:17:a1:de:96:4b:cc:51:00:48:cb:84:ff:13:
         6c:ed:c8:16:63:c7:84:a2:43:36:b5:c3:b1:47:97:a7:2b:e1:
         b5:3d:4a:a9:23:bc:df:ef:e3:1f:41:10:7a:13:f8:df:cc:dc:
         ac:1d:44:2d:7a:7b:2c:ee:0d:de:5d:7f:7c:25:40:5d:5a:5c:
         75:0b:a9:12:0c:84:0a:5c:5b:ee:df:c7:2c:6f:43:1f:93:c3:
         cf:aa:ef:db:56:e6:77:f6:80:e5:00:61:48:46:09:43:f3:8a:
         a7:03:79:aa:f3:60:d8:f3:da:f3:8c:4d:83:76:0e:68:34:0c:
         7a:58:eb:97:1b:8e:11:5a:9c:f9:48:47:47:06:b0:18:28:b4:
         32:e6:aa:97:1a:48:ec:3b:1f:d9:84:b8:c0:fa:75:ab:97:9e:
         08:a8:78:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThFQzQxMTAvBgNVBAUTKDUzMjQwNjVBNjEzRDJEMTA3ODE3OUM2MjE2MzcxQ0ND
NkE3NzUwN0EwHhcNMjYwNzI3MDUzNzUyWhcNMjYwODAzMDUzNzUyWjAYMRYwFAYD
VQQDEw02YTY2ZWViMC0wZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlY4chFSwfO/90iy6yldgTDZAtlyUdDDLwCojRGpKomHZ31XnVdRaVmGqzaC
GQUKQyM4nNADrunN+POzB+uRVMgL8et9DY+CX7YGMng7Vw5/OGd9C4hVWnzOudpW
s+OLSTL5UB0Sua/k7Rvx84UgF+4Di6fp1LY2KJyMuMrij/n+TNcdrlonH8NYeFiJ
fhdjteP0I5+TP7PVVLbYS6kZUhkcYMRKHc0YbUfUWYq/7zh4oF76oNq7ozTuovbf
WIrRwBhpewsVMh5wj4yoIk8PK26az3/pLSQa2mL5Kt+TdB6Wn9fJ4at23yexdwpm
CzWMqrSW+iHOJ1AcDWbtQl8eOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6gvX+B
NHRgS9mRoCeCT6oSGcpQMB8GA1UdIwQYMBaAFFMkBlphPS0QeBecYhY3HMxqd1B6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEVDNC80NTA2NDc5MEU1
QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxSQjRGNXhpRmpjY3pHcDNV
SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V5UUdXbUU5TFJCNEY1eGlGamNjekdwM1VIby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEVDNC80NTA2NDc5MEU1QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxS
QjRGNXhpRmpjY3pHcDNVSG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAwJ7LPEtJlf+RWSYkMw+QFcCTBt0zK3cSYf32VsMMjsA9R+JyPO5qCQk/V5a
5KYXe25YI4JvC+KbKfe5Z0HN7MokLmauXfte4mJfyZ4DqTVH/dqm2KCYVCKQ4CCk
IqwXod6WS8xRAEjLhP8TbO3IFmPHhKJDNrXDsUeXpyvhtT1KqSO83+/jH0EQehP4
38zcrB1ELXp7LO4N3l1/fCVAXVpcdQupEgyEClxb7t/HLG9DH5PDz6rv21bmd/aA
5QBhSEYJQ/OKpwN5qvNg2PPa84xNg3YOaDQMeljrlxuOEVqc+UhHRwawGCi0Muaq
lxpI7Dsf2YS4wPp1q5eeCKh48A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:00 2026 by rpki-client